SonicOS 7.1 High Availability Administration Guide
- SonicOS 7.1
- About SonicOS
- High Availability
- High Availability Status
- Configuring High Availability
- Configuring High Availability in the Cloud Platform
- Set up an Active/Standby High Availability Configuration Using Azure
- Install the Custom Template
- Enable Identity of Both Virtual Machines (HA1 and HA2)
- Role Assignment
- Check the Networking Tab
- Configuring Active NSv Firewall Using the Associated Public IP
- Configuring Standby NSv Firewall Using the Associated Public IP
- Enable the L3 Mode
- Configuring Active NSv Firewall Using the Floating Public IP
- Configuring HA to Active/Standby with L3 HA link
- Adding Additional Floating Public IP
- Set up an Active/Standby High Availability Configuration Using Azure
- Fine Tuning High Availability
- Monitoring High Availability
- Azure Use Cases
- SonicWall Support
Supported Platforms and Licensing for HA
Licenses included with the purchase of a SonicWall Security Appliance are shown in HA licenses available with SonicWall Security Appliances table. Some platforms require additional licensing to use the HA features.
The HA licenses included with the purchase of the SonicWall Security Appliance are shown in HA licenses available with SonicWall Security Appliances. Some platforms require additional licensing to use the Stateful Synchronization feature. SonicOS Expanded licenses or High Availability licenses can be purchased on MySonicWall or from a SonicWall reseller.
Stateful High Availability licenses must be activated on each Security Appliance, either by registering the unit on MySonicWall from the SonicOS management interface, or by applying the license keyset to each unit if Internet access is not available.
Platform | Active/Standby HA | Stateful HA |
TZ270/TZ270 W | Included | Optional |
TZ370/TZ370 W | Included | Optional |
TZ470/TZ470 W | Included |
Optional |
TZ570/TZ570 W/TZ570 P | Included |
Optional |
TZ670 | Included |
Optional |
NSA 2700 | Included |
Optional |
NSA 3700 | Included |
Optional |
NSA 4700 | Included | Included |
NSA 6700 | Included | Included |
NSsp 10700 | Included | Included |
NSsp 11700 | Included | Included |
NSSP 13700 | Included | Included |
NSSP 15700 | Included | Included |
NSv 270 | Included | Included |
NSv 470 | Included | Included |
NSv 870 | Included | Included |
HA Stateful licensing is not standard across all models. Enterprise class models often include HA Stateful licensing.
You can view system licenses on DEVICE | Settings > Licenses. This page also provides a way to log into MySonicWall and to apply licenses to a Security Appliance. For further information, see SonicOS7.1 Settings document.
There is also a way to synchronize licenses for an HA pair whose Security Appliances do not have Internet access. When live communication with SonicWall's licensing server is not permitted due to network policy, you can use license keysets to manually apply security services licenses to your Security Appliances. When you register a Security Appliance on MySonicWall, a license keyset is generated for the Security Appliance. If you add a new security service license, the keyset is updated. However, until you apply the licenses to the Security Appliance, it cannot perform the licensed services.
In a High Availability deployment without Internet connectivity, you must apply the license keyset to both of the Security Appliances in the HA pair.
Even if you first register your Security Appliances on MySonicWall, you must individually register both the Primary and the Secondary Security Appliances from the SonicOS management interface while logged into the individual management IP address of each Security Appliance. This allows the Secondary unit to synchronize with the SonicWall license server and share licenses with the associated Primary Security Appliance. When Internet access is restricted, you can manually apply the shared licenses to both Security Appliances.
Was This Article Helpful?
Help us to improve our support portal